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Response to Arguments 

1 . This communication is in response to applicants' response received on June 20, 
2005. 

2. Amendments of the claims 1 and 22 are acknowledged. 

3. Applicant's arguments have been fully considered but they are not persuasive. 

4. With regards to independent claims 1,15 and 22, on pages 9 and 10, applicants 
argue: Handelman does not provide for continuing the operation if the main card is 
removed but the auxiliary replacement card is present. Applicants therefore submit that 
Handelman cannot be deemed to disclose or suggest a computing apparatus 
comprising processing means, wherein the processing means is arranged to "cause the 
computing platform to suspend interaction between the secure process and the user if 
authentication is not possible as a result of the removal of the primary token unless the 
primary token is replaced by an authorised auxiliary token" as recited in claim 1 . 

Handelman discloses that if the main card is removed from the card receptacle 
none of the transmitted programs is decrypted (i.e., interaction between the secure 
process and the user is suspended) (col. 8, lines 5-7). Handelman further discloses that 
when the main card is needed to be replaced the required authentication information 
are transmitted to the parent card (i.e., auxiliary card) in order to decrypt the receiving 
programs until a new main card is received by the consumer (col. 8, lines 32-48). This 
disclosure by Handelman indicates that the services provided to a consumer is 
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suspended if the main card is removed from the system, unless the main card or a 
replacement card (the replacement card also can be considered as an auxiliary card) is 
reinserted in the card reader's receptacle or the parent card that has received 
authentication information from the main card is used. Thus, in the later case when the 
parent card (i.e., auxiliary card) is present in the system the services will not be 
suspended and decryption of the transmitted programs will be continued. 

5. In light of the above submission the previous rejection of claims is maintained. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

I. Claims 1, 3-5, 8, 9, 13-15, 17-19, 22 and 29 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Handelman et al (6,298,441 B1; hereinafter 
Handelman) in view of Holtey (5,442,704). 

Regarding claim 1, Handelman discloses a computing apparatus comprising: 
memory means storing the instructions of a secure process and an 
authentication process (col. 5, lines 52-67; col. 7, lines 47-60; col. 9, lines 12-21; col. 

II, lines 5-46); 
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processing means arranged to control the operation of the computing apparatus 
including by executing the secure process and the authentication process (col. 5, lines 
52-67; col. 7, lines 47-60; col. 9, lines 12-21; col. 11, lines 5-46); 

user interface means arranged to receive user input and return to the user 
information generated by the processing means in response to the user input (col. 11, 
lines 5-46); and 

interface means for receiving a removable primary token and communicating with 
the token, the token comprising a body supporting (col. 8, lines 49-60): 

a token interface for communicating with the interface means (col. 3, lines 30-48; 
Fig. 4; Fig. 7); 

a token processor (col. 14, lines 21-28), and 

token memory storing token data including information for identifying the token 
and auxiliary token information identifying one or more authorized auxiliary tokens (col. 
4, line 38-col. 5, Iine5; col. 8, lines 10-18; col. 15, lines 34-50, where the main card also 
retains billing information of the restricted programs viewable only by using the parent 
card that corresponds to the auxiliary card), 

wherein the processing means is arranged to receive the identity information and 
the auxiliary token information from the primary token (Fig. 3, CPU 62; col. 8, lines 10- 
18, where the main card also retains billing information of the restricted programs 
viewable only by using the parent card that corresponds to the auxiliary card), 
authenticate the token using the authentication process and, if the token is successfully 
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authenticated, permit a user to interact with the secure process via the user interface 
means (col. 5, line 65-col. 6, lines 6; col. 7, lines 47-56; col. 14, lines 58-66), 

and cause the computing platform to suspend interaction between the secure 
process and the user if authentication is not possible as a result of the removal of the 
primary token unless the primary token is replaced by an authorized auxiliary token (col. 
8, lines 19-60; col. 11, lines 32-46, where the absence of smart card corresponds to the 
recited the removal of the primary token; col. 12, lines 27-29; Fig. 8, where leaving the 
program scrambled corresponds to the recited to suspend interaction). 

However, Handelman does not expressly disclose that the processing means is 
arranged to repeatedly authenticate the primary token. 

Holtey discloses an access control system using smart cards that re-authenticate 
the system user (corresponding to the recited repeatedly authenticate the primary 
token) at an adjustable time interval (col. 6, lines 60-col. 7, lines 8). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to implement a periodic authentication (i.e., repeated 
authentication) measure as taught in Holtey in the system of Handelman because it 
would provide a mechanism to enforce security (Holtey, col. 7, lines 5-8). 

Regarding claim 3, Handelman discloses a smart or IC card that includes all 
forms of cards that are used for different application such as a smart card for 
purchasing a service or a document according to a spending limit that corresponds to 
the recited to credit or debit the token (col. 2, line 55-col. 3, Iine14). 
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Regarding claim 4, Handelman discloses: the authorized token is a crypto token 
programmed to encrypt, decrypt or sign data, and the secure process is arranged to 
transmit data to the crypto token to be encrypted, decrypted or signed and receive 
encrypted, decrypted or signed data from the crypto token (col. 3, lines 20-27; col. 11, 
lines 5-15; col. 18, lines 41-47). 

Regarding claim 5, Handelman discloses: computing apparatus according to 
claim 1 , arranged, only if the different token is an authorized auxiliary token, to allow the 
user to interact with the secure process (col. 5, lines 1-27). 

Regarding claims 8 and 9, Handelman discloses: computing apparatus according 
to claim 1 , arranged to permit interaction between the secure process and one or more 
authorized auxiliary token after removal of the primary token (col. 3, lines 40-47; col. 8, 
lines 7-9, where the parent card corresponds to the recited primary token). 

Regarding claim 13, Handelman discloses: computing apparatus according to 
claim 1, wherein the primary token comprises a smart card (col. 2, lines 55-59), and the 
interface means is configured to receive a smart card (col. 8, lines 49-60). 

Regarding claim 14, Handelman discloses: computing apparatus according to 
claim 1, wherein the auxiliary token information is stored in a user profile (col. 8, lines 
10-18; col. 13, lines 46-54; col. 15, lines 34-50, where the authorization information read 
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from the card 400 corresponding to the recited auxiliary token are sent to the remote 
device 355 for authentication purpose. Thus, the user authorization information must 
exist at the remote device, with the other user information corresponding to the user 
profile). 

Regarding claim 15, Handelman discloses: A method of controlling computing 
apparatus to authenticate a user, comprising the steps: 

the computing apparatus receiving a primary token of the user, the primary token 
containing information suitable for authenticating the primary token and information 
relating to one or more authorized auxiliary tokens (col. 4, line 38-col. 5, Iine5; col. 8, 
lines 10-18; col. 15, lines 34-50, where the main card also retains billing information of 
the restricted programs viewable only by using the parent card that corresponds to the 
auxiliary card); 

if the token is authentic, permitting the user to interact with one or more secure 
applications that may be executed by the computing platform (col. 5, line 65-col. 6, lines 
6; col. 7, lines 47-56; col. 15, lines 34-50); and 

if it is not possible to authenticate the primary token, suspending the interaction 
between the computing apparatus and the user unless the primary token has been 
replaced with an authorized auxiliary token (col. 8, lines 19-60; col. 1 1 , lines 32-46, 
where the absence of smart card corresponds to the recited the removal of the primary 
token; col. 12, lines 27-29; Fig. 8, where leaving the program scrambled corresponds to 
the recited to suspend interaction). 
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However, Handelman does not expressly disclose that at intervals, 
re-authenticating the primary token. 

Holtey discloses an access control system using smart cards that re-authenticate 
the system user (corresponding to the recited repeatedly authenticate the primary 
token) at an adjustable time interval (col. 6, lines 60-coI. 7, lines 8). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to implement a periodic authentication (i.e., repeated 
authentication) measure as taught in Holtey in the system of Handelman because it 
would provide a mechanism to enforce security (Holtey, col. 7, lines 5-8). 

Regarding claim 17, Handelman discloses: A method according to claim 15, 
wherein the computing apparatus interaction with the authorized auxiliary token for a 
limited period of time (col. 3, lines 10-14, where the interaction is limited to the spending 
amount). 

Regarding claims 18 and 19, Handelman discloses: A method according to claim 
15, wherein the computing apparatus permits interaction with one or plural authorized 
auxiliary token after removal of the primary token (col. 3, lines 40-47; col. 8, lines 7-9, 
where the parent card corresponds to the recited primary token). 

Regarding claim 22, Handelman discloses: Computing apparatus comprising: 



Application/Control Number: 09/936,132 Page 9 

Art Unit: 2132 

One or more memories adapted to store the instructions of a secure process and 
an authentication process (col. 5, lines 52-67; col. 7, lines 47-60; col. 9, lines 12-21; col. 
11, lines 5-46); 

one or more processors arranged to control the operation of the computing 
apparatus including by executing the secure process and the authentication process 
(col. 5, lines 52-67; col. 7, lines 47-60; col. 9, lines 12-21; col. 11, lines 5-46); 

a user interface arranged to receive user input and return to the user information 
generated by the one or more processors in response to the user input (col. 1 1 , lines 5- 
46); and 

a token reader interface for receiving and communicating with a removable 
token, the token having a token memory storing token data including information for 
identifying the token and auxiliary token information identifying one or more authorized 
auxiliary tokens (col. 3, lines 30-48; Fig. 4; Fig. 7; col. 4, line 38-col. 5, line 5; col. 8, 
lines 10-18; col. 15 col. 8, lines 34-60, where the main card also retains billing 
information of the restricted programs viewable only by using the parent card that 
corresponds to the auxiliary card), 

wherein the one or more processors are arranged to receive the identity 
information and the auxiliary token information from a primary token received in the 
token reader interface (Fig. 3, CPU 62; col. 8, lines 10-18, where the main card also 
retains billing information of the restricted programs viewable only by using the parent 
card that corresponds to the auxiliary card), authenticate the primary token using the 
authentication process and, if the primary token is successfully authenticated, permit a 
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user to interact with the secure process via the user interface (col. 5, line 65-col. 6, lines 
6; col. 7, lines 47-56; col. 14, lines 58-66), and cause the computing platform to 
suspend interaction between the secure process and the user if authentication is not 
possible as a result of the removal of the primary token unless the primary token is 
replaced by an authorized auxiliary token (col. 8, lines 19-60; col. 1 1 , lines 32-46, where 
the absence of smart card corresponds to the recited the removal of the primary token; 
col. 12, lines 27-29; Fig. 8, where leaving the program scrambled corresponds to the 
recited to suspend interaction). 

However, Handelman does not expressly disclose that the processing means is 
arranged to repeatedly authenticate the primary token. 

Holtey discloses an access control system using smart cards that re-authenticate 
the system user (corresponding to the recited repeatedly authenticate the primary 
token) at an adjustable time interval (col. 6, lines 60-col. 7, lines 8). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to implement a periodic authentication (i.e., repeated 
authentication) measure as taught in Holtey in the system of Handelman because it 
would provide a mechanism to enforce security (Holtey, col. 7, lines 5-8). 

Regarding claim 29, Handelman discloses: Computing apparatus according to 
claim 22, wherein the primary token comprises a smart card, and the token reader 
interface is configured to receive a smart card (col. 8, lines 49-60; col. 2, lines 55-59). 
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2. Claims 2, 16, 23 and 28 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Handelman etal (6,298,441 B1; hereinafter Handelman) in view 
of Holtey (5,442,704) and further in view of Perlman et al (6,173,400; hereinafter 
Perlman). 

Regarding claims 2, 16, 23 and 28, Handelman in view of Holtey discloses that 
the primary token comprises a token processor (col. 14, lines 25-28). Handelman in 
view of Holtey does not expressly disclose a computing apparatus according to claim 1 , 
arranged to generate information representing the integrity of the computing apparatus 
and transmit the integrity information to the primary token (via the trusted device, i.e., 
card reader), wherein the token processor is programmed to verify the integrity of the 
computing apparatus including by using the integrity information. 

Perlman discloses a method for establishing a shared secret using an 
authentication token to provide adequate mutual authentication and integrity protection 
(col. 4, lines 32-43). Perlman further discloses that a smart card can operate as an 
authentication token to establish a shared secret (corresponding to the recited integrity 
information) with a remote device to be used for mutual authentication and to check the 
integrity of the information being transmitted between the smart card and the remote 
device (corresponding to the verification of the integrity of the remote device or the 
smart card) (col. 12, lines 1-54). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to implement the use of a share secret between a 
smart card and a remote device as taught in Perlman in the system of Handelman in 
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view of Holtey for mutual authentication and integrity check, because it would enhance 
session security (Perlman, col. 3, lines 1-5). 

3. Claim 10, 11, 26 and 27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Handelman etal (6,298,441 B1; hereinafter Handelman) in view 
of Holtey (5,442,704) and further in view of Lee (5,923,759; hereinafter Lee). 

Regarding claim 10, 11, 26 and 27, Handelman in view of Holtey discloses: 
computing apparatus according to claim 1, wherein the processing means (Fig. 7, CATV 
Decoder 250) comprises a main processing unit (Fig. 7, CPU 262) and the memory 
means comprises main memory (Fig. 7, Memory 270). 

However, Handelman in view of Holtey does not expressly disclose that the 
processing means is arranged to comprise a secure processing unit and the memory 
means comprise a secure memory. 

Lee discloses a system for securely exchanging data with smart cards (Fig. 1) 
that comprises a secure processor (Fig. 1, 122) and a secure data memory (Fig. 1, 
126). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to include a secure processor and secure memory 
area as taught in Lee in the system of Handelman in view of Holtey because it would 
provide for secure process of encrypting and decrypting data and for secure storage of 
the encryption keys (Lee, col. 2, lines 50-65). 
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4. Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Handelman et al (6,298,441 B1 ; hereinafter Handelman) in view of Holtey 
(5,442,704) and further in view of Perlman et al (6,173,400; hereinafter Perlman). 

Regarding claim 12, Handelman in view of Holtey discloses that the primary 
token comprises a token processor (col. 14, lines 25-28). Handelman in view of Holtey 
does not expressly disclose a computing apparatus according to claim 1, arranged to 
generate information representing the integrity of the computing apparatus and transmit 
the integrity information to the primary token, wherein the token processor is 
programmed to verify the integrity of the computing apparatus including by using the 
integrity information. 

Perlman discloses a method for establishing a shared secret using an 
authentication token to provide adequate mutual authentication and integrity protection 
(col. 4, lines 32-43). Perlman further discloses that a smart card can operate as an 
authentication token to establish a shared secret (corresponding to the recited integrity 
information) with a remote device to be used for mutual authentication and to check the 
integrity of the information being transmitted between the smart card and the remote 
device (corresponding to the verification of the integrity of the remote device or the 
smart card) (col. 12, lines 1-54). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to implement the use of a share secret between a 
smart card and a remote device as taught in Perlman in the system of Handelman in 
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view of Holtey for mutual authentication and integrity check, because it would enhance 
session security (Perlman, col. 3, lines 1-5). 

Allowable Subject Matter 

Claims 6, 7, 24 and 25 are objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the 
limitations of the base claim and any intervening claims. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Abdulhakim Nobahar whose telephone number is 571- 
272-3808. The examiner can normally be reached on M-T 8-6. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Abdulhakim Nobahar 
Examiner - 
Art Unit 2132 /L 
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SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 




